CVE-2021-45420 - CVE House
Back to Database
Status published Critical CVE-2021-45420

Emerson Dixell XWEB-500 products are affected by arbitrary file write...

Vulnerability Description

Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system without any kind of authentication mechanism, and this can lead to denial of service and potentially remote code execution. Note: the product has not been supported since 2018 and should be removed or replaced.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45420

Credits & Attribution

No credits recorded in the NVD database.

References

More from emerson

View All →
CVE-2022-30264
The Emerson ROC and FloBoss RTU product lines through 2022-05-02...
Critical 9.8
CVE-2022-30262
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware...
High 7.8
CVE-2022-30260
Emerson DeltaV Distributed Control System (DCS) has insufficient verification of...
High 7.8
CVE-2022-29965
The Emerson DeltaV Distributed Control System (DCS) controllers and IO...
Medium 5.5
CVE-2022-29964
The Emerson DeltaV Distributed Control System (DCS) controllers and IO...
Medium 5.5

Affected Vendor

Affected Software

dixell xweb-500 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 14th, 2022
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.